General discussion

Palo Alto Web-GUI UI Admin - Azure AD

Hello community, thank you as always for your time and collaboration.

I have a question, some client is asking me and asking if Azure-AD can be used for authentication of administration access to the firewall...

Now with Global Protect we have configured it, without a theme there are no problems, now Global Protect the portal is exposed to the Internet... that means that I will have to expose my MGT to the Internet... I think this is not a good idea there.

The client wants to use their Azure-AD users and therefore their MFA that they have in Azure, but I feel that it is not the best idea if the Web-Gui must be exposed to the Internet.

Is there any alternative for this, to use offline or locally or somehow without having to expose the Web-Gui?

learn.microsoft.com

Learn how to configure single sign-on between Microsoft Entra ID and Palo Alto Networks - Admin UI.

Thanks, I'll stay tuned.

Kind regards